JIT: Assertion STACK_LEVEL() >= 0 failed in optimize_uops #144016
Description
Crash report
What happened?
It's possible to cause an assertion failure in a JIT build by running the code below. Even though it's a pretty long code snippet, the execution stops at the line marked with # Execution stops here.
MRE
def f1():
def f_0_286(p): ...
def f_1_286(p): ...
def f286(p): ...
def f_3_286(p): ...
def f_4_286(p): ...
def f_286(p): ...
def f6(p): ...
def f_7_286(p): ...
def f86(p): ...
def f_9_286(p): ...
def f_10_286(p): ...
class ChaoticIterator_comp_1908:
def __init__(self, items):
for i_974 in range(68):
pass
for i_39 in [2]:
for i_2975 in range(63):
for i_6109 in range(15):
_1908 = ChaoticIterator_comp_1908(range(20)) # Execution stops here
try:
for i_6825 in ...:
for i_8273 in ...:
...
except ...:
for i_5941 in ...:
...
def _churn(): ...
for i_468 in ...:
for i_2 in ...:
...
for i_4816 in ...:
try:
for i_526 in ...:
for i_8807 in ...:
p = ...
except ...:
i_318 = ...
for i_6398 in ...:
...
for i_1992 in ():
...
for i_972 in ...:
...
for i_6137 in ...:
i_127 = ...
for i_9024 in ...:
for i_9043 in ...:
...
for i_9086 in ...:
...
for i_236 in ...:
...
for i_6709 in ...:
...
for i_7 in ...:
for i_193 in ...:
for i_7264 in ...:
for i_5386 in ...:
p = ...
for i_3861 in ...:
for i_32 in ...:
...
for i_6418 in ...:
...
for i_9572 in ...:
for i_71 in ...:
...
for i_489 in ...:
for i_9 in ...:
for i_63 in ...:
for i_6014 in ...:
p = ...
for i_914 in ...:
for i_66 in ...:
_p = 1
for i_754 in ...:
for i_3164 in ...:
...
for i_3714 in ...:
for i_328 in ...:
...
for i_8215 in ...:
for i_9280 in ...:
...
for i_43 in ...:
...
for i_894 in ...:
(
unp_6425,
*unp_20,
unp_37156,
unp_62734,
unp_7324,
unp_47915,
unp_6235,
unp_74065,
unp_812,
) = ...
for i_642 in ...:
...
for i_976 in ...:
for i_21 in ...:
for i_49 in ...:
for i_3843 in ...:
p = ...
for i_456 in ...:
...
for i_9035 in ...:
...
for i_8417 in ...:
for i_5894 in ...:
...
for i_483 in ...:
...
for i_17 in ...:
...
for i_359 in ...:
for i_9012 in ...:
...
for i_6790 in ...:
...
for i_6835 in ...:
for i_8038 in ...:
for i_47 in ...:
for i_58 in ...:
for i_62 in ...:
for i_440 in ...:
p = ...
for i_13 in ...:
for i_89 in ...:
i_9658 = ...
for i_8234 in ...:
for i_4807 in ...:
for i_6082 in ...:
p = ...
for i_9178 in ...:
for i_1841 in ...:
...
for i_8706 in ...:
for i_694 in ...:
...
for i_8919 in ...:
for i_9430 in ...:
for i_3905 in ...:
...
for i_9851 in ...:
...
for i_4295 in ...:
for i_807 in ...:
...
for i_7901 in ...:
for i_lop_14 in ...:
for i_67 in ...:
i_14 = ...
try:
try:
for i_9809 in ...:
i_731 = ...
except ...:
for i_693 in ...:
3
except ...:
i_6578 = ...
for i_8072 in ...:
for i_152 in ...:
...
for i_9431 in ...:
for i_5974 in ...:
...
for i_2749 in ...:
for i_7162 in ...:
for i_1420 in ...:
...
for i_lop_74 in ...:
for i_23 in ...:
for i_8528 in ...:
for i_186 in ...:
...
for i_1 in ...:
...
for i_6831 in ...:
for i_9169 in ...:
for i_8671 in ...:
_jump = ...
try:
if i_ in ...:
for i_85 in ...:
i_8391 = ...
for i_415 in ...:
for i_3160 in ...:
for i_1802 in ...:
for i_7462 in ...:
...
except ...:
for i_3290 in ...:
for i_1470 in ...:
...
for i_1528 in ...:
for i_10 in ...:
...
for i_9213 in ...:
for i_826 in ...:
for i_771 in ...:
p = ...
for i_2408 in ...:
...
for i_3251 in ...:
for i_3528 in ...:
for i_9417 in ...:
...
for i_9563 in ...:
...
for i_594 in ...:
1
for i_3561 in ...:
...
for i_3082 in ...:
for i_449 in ...:
try:
for i_975 in ...:
i_1250 = ...
except ...:
for i_54 in ...:
for i_1965 in ...:
for i_4739 in ...:
for i_53 in ...:
...
for i_lop_3 in ...:
for i_8347 in ...:
for i_2490 in ...:
p = ...
for i_725 in ...:
for i_8465 in ...:
for i_2848 in ...:
for i_3256 in ...:
p = ...
for i_2462 in ...:
for i_90 in ...:
...
for i_9127 in ...:
for i_4265 in ...:
for i_8294 in ...:
try:
for i_5291 in ...:
p = ...
except ...:
for i_8472 in ...:
...
for i_4068 in ...:
for i_2850 in ...:
for i_52 in ...:
...
for i_2396 in ...:
try:
for i_57 in ...:
mp = ...
except ...:
...
for i_3572 in ...:
for i_45 in ...:
p = ...
for i_3716 in ...:
for i_96 in ...:
for i_345 in ...:
...
for i_2095 in ...:
i_40 = i_2095
for i_144 in ...:
...
for i_3012 in ...:
for i_7637 in ...:
for i_3 in ...:
for i_4385 in ...:
p = ...
for i_247 in ...:
try:
for i_3654 in ...:
_p = ...
except ...:
i_15 = ...
for i_lop_7649 in ():
try:
for i_3062 in ...:
i_7649 = ...
except ...:
for i_8138 in ...:
for i_7802 in ...:
...
for i_5236 in ...:
for i_1734 in ...:
...
for i_20 in ...:
for i_5198 in ...:
...
for i_8125 in ...:
for i_2381 in ...:
try:
for i_3148 in ...:
p = ...
except ...:
for i_9145 in ...:
...
for i_2138 in ...:
...
for i_9583 in ...:
...
for i_169 in ...:
...
for i_8061 in ...:
for i_28 in ...:
for i_4039 in ...:
p = ...
for i_479 in ...:
...
for i_220 in ...:
for i_780 in ...:
...
for i_5897 in ...:
for i_6531 in ...:
for i_313 in ...:
...
for i_963 in ...:
...
for i_2890 in ...:
...
for i_5427 in ...:
...
for i_6954 in ...:
for i_6 in ...:
p = (
unp_70,
*unp_872,
unp_16897,
unp_67823,
unp_206,
unp_40139,
unp_31768,
unp_66,
unp_36785,
unp_31,
unp_157,
unp_2401,
unpack_975,
unp_2537,
unp_91,
unp_40,
unp_509,
unp_9478,
unp_4390,
u,
unp_346,
unp_41670,
unp_85167,
unp_92340,
unp_197,
unp_58,
unp_311,
unp_83901,
unp_76059,
unpar_701,
unp_3,
unp_15394,
unpack_69,
unp_5794,
unp_23710,
unp_9518,
unp_30697,
unpack_20,
) = ...
for i_741 in ...:
for i_2159 in ...:
for i_7563 in ...:
...
for i_7935 in ...:
for i_6025 in ...:
...
for i_987 in ...:
for i_922 in ...:
...
for i_4948 in ...:
for i_6704 in ...:
...
for i_92 in ...:
for i_5190 in ...:
(
unp_6,
*unp_95,
unp_7,
unp_354,
) = ...
for i_5034 in ...:
for i_329 in ...:
...
for i_1371 in ...:
for i_9638 in ...:
try:
if i_2:
for i_2810 in ...:
p = ""
for i_2902 in ...:
...
except ...:
...
for i_6405 in ...:
for i_6291 in ...:
...
for i_192 in ...:
...
for i_4798 in ...:
...
for i_68 in ...:
for i_6085 in ...:
...
for i_74 in ...:
for i_1829 in ...:
...
for i_284 in ...:
...
for i_315 in ...:
for i_276 in ...:
for i_614 in ...:
...
for i_7459 in ...:
for i_8716 in ...:
for i_60 in ...:
for i_48 in ...:
p = ...
for i_1869 in ...:
for i_790 in ...:
...
for i_2957 in ...:
for i_906 in ...:
...
for i_3074 in ...:
for i_1767 in ...:
for i_210 in ...:
for i_56 in ...:
...
for i_946 in ...:
try:
if ... != ...:
i_812 = ...
for i_6745 in ...:
...
except ...:
...
for i_2689 in ...:
for i_676 in ...:
...
for i_l in ...:
for i_6508 in ...:
...
for i_3693 in ...:
i_4037 = i_4037
for i_6346 in ...:
for i_258 in ...:
...
for i_948 in ...:
for i_6197 in ...:
for i_175 in ...:
...
for i_7516 in ...:
...
for i_546 in ...:
for i_72 in ...:
...
for i_9358 in ...:
for i_930 in ...:
for i_5792 in ...:
...
for i_413 in ...:
for i in ...:
for i_1480 in ...:
p = ...
for i_603 in ...:
for i_240 in ...:
i_8 = ""
for i_9728 in ...:
p = 1
for i_5721 in ...:
for i_4 in ...:
i_9580 = ...
for i_5027 in ...:
for i_6456 in ...:
...
for i_6081 in ...:
...
for i_412 in ...:
for i_8164 in ...:
for i_845 in ...:
for i_3283 in ...:
p = ...
for i_2693 in ...:
for i_606 in ...:
...
for i_7480 in ...:
for i_470 in ...:
...
for i_6523 in ...:
for i_9543 in ...:
for i_76 in ...:
for i_509 in ...:
...
for i_5391 in ...:
for i_3246 in ...:
for i_9457 in ...:
for i_5412 in ...:
p = ...
for i_5958 in ...:
for i_5731 in ...:
for i_2746 in ...:
for i_9601 in ...:
for i_6301 in ...:
for i_8796 in ...:
p = ...
for i_6787 in ...:
for i_30 in ...:
try:
for i_lop_5 in ...:
for i_50 in ...:
for i_9463 in ...:
p = ...
except ...:
i_4301 = ...
for i_29 in ...:
for i_38 in ...:
for i_239 in ...:
for i_3875 in ...:
for i_342 in ...:
p = ...
for i_983 in ():
for i_6897 in ...:
try:
for i_33 in ...:
p = ...
except ...:
i_7096 = ...
for i_3287 in ...:
...
for i_2030 in ...:
for i_6378 in ...:
for i_9243 in ...:
...
for i_1205 in ...:
for i_9483 in ...:
...
for i_1028 in ...:
for i_2573 in ...:
...
for i_9189 in ...:
try:
if ...:
for i_3128 in ...:
i_203 = ...
for i_6343 in ...:
for i_1520 in ...:
p = ...
except ...:
3
for i_885 in ...:
for i_7139 in ...:
...
for i_724 in ...:
for i_5472 in ...:
...
for i_348 in ...:
try:
for i_4592 in ...:
for i_6278 in ...:
for i_453 in ...:
...
except ...:
for i_9172 in ...:
i_26 = ...
for i_3095 in ...:
...
for i_5 in ...:
for i_8310 in ...:
...
class F162: ...
_162 = F162()
for i162 in ...:
try:
for i_5631 in ...:
try:
for i_961 in ...:
...
except ...:
for i_6156 in ...:
...
for i_8705 in ...:
for i_613 in ...:
for i_8515 in ...:
for i_99 in ...:
...
for i_9520 in ...:
_ = i_9520
except ...:
(
unp_4852,
*unp1,
unp_4,
unp_754,
unp_16,
unp_937,
unp_5783,
unp_97284,
unp_68,
unp_175,
unp_5026,
unp_7315,
unp_49632,
unp_3608,
unp_9,
unp_30,
unpar_632,
unpar_803,
unp_1,
unp_10972,
unp_389,
unp_259,
unp_33,
unp_6485,
unp_2865,
unp_23154,
unp_60794,
unpack_56893,
unp_41,
) = ...
class F_835: ...
for i_8376 in ...:
for i18 in ...:
try:
try:
for i_8914 in ...:
for i_7471 in ...:
...
except ...:
i_6598 = ...
except Exception:
for i_543 in ...:
...
for i_1632 in ...:
for i_4298 in ...:
for i_84 in ...:
for i_1549 in ...:
...
for i_4982 in ...:
for i_3917 in ...:
try:
ret = ...
except:
i_9047 = ...
for i_6039 in ():
for i_55 in ...:
...
for _892 in ...:
t_ = ...
for i_761 in ...:
for i_7109 in ...:
for i_8362 in ...:
s = ...
for i_3032 in ...:
__ = ...
f1()Backtrace
python: Python/optimizer_analysis.c:474: int optimize_uops(_PyThreadStateImpl *, _PyUOpInstruction *, int, int, _PyBloomFilter *): Assertion `STACK_LEVEL() >= 0' failed.
Program received signal SIGABRT, Aborted.
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=6, no_tid=0) at ./nptl/pthread_kill.c:44
#1 __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ./nptl/pthread_kill.c:100
#3 0x00007ffff7c45e2e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#4 0x00007ffff7c28888 in __GI_abort () at ./stdlib/abort.c:77
#5 0x00007ffff7c287f0 in __assert_fail_base (fmt=<optimized out>, assertion=<optimized out>, file=<optimized out>, line=<optimized out>, function=<optimized out>) at ./assert/assert.c:118
#6 0x00007ffff7c3c19f in __assert_fail (assertion=<optimized out>, file=<optimized out>, line=<optimized out>, function=<optimized out>) at ./assert/assert.c:127
#7 0x0000555556422ff9 in optimize_uops (tstate=<optimized out>, trace=<optimized out>, trace_len=<optimized out>, curr_stacklen=<optimized out>, dependencies=<optimized out>)
at Python/optimizer_analysis.c:474
#8 0x000055555640aed3 in _Py_uop_analyze_and_optimize (tstate=0x33fcef, tstate@entry=0x555556ed4828 <_PyRuntime+359464>, buffer=0x33fcef, length=6, curr_stacklen=2,
dependencies=0x7ffff6f2e878) at Python/optimizer_analysis.c:674
#9 0x00005555563fd57d in uop_optimize (frame=0x7e8ff6de6330, tstate=0x555556ed4828 <_PyRuntime+359464>, progress_needed=true, exec_ptr=<optimized out>) at Python/optimizer.c:1531
#10 _PyOptimizer_Optimize (frame=frame@entry=0x7e8ff6de6330, tstate=tstate@entry=0x555556ed4828 <_PyRuntime+359464>) at Python/optimizer.c:170
#11 0x0000555555edb36b in stop_tracing_and_jit (tstate=0x555556ed4828 <_PyRuntime+359464>, frame=frame@entry=0x7e8ff6de6330) at Python/ceval.c:1110
#12 0x0000555555e938fd in _PyEval_EvalFrameDefault (tstate=<optimized out>, frame=<optimized out>, throwflag=<optimized out>) at Python/generated_cases.c.h:12497
#13 0x0000555555e740d8 in _PyEval_EvalFrame (tstate=0x555556ed4828 <_PyRuntime+359464>, frame=0x7e8ff6de5220, throwflag=0) at ./Include/internal/pycore_ceval.h:118
#14 _PyEval_Vector (tstate=<optimized out>, func=<optimized out>, locals=<optimized out>, args=<optimized out>, argcount=<optimized out>, kwnames=0x0) at Python/ceval.c:2092
#15 0x0000555555e73af5 in PyEval_EvalCode (co=<optimized out>, globals=<optimized out>, locals=0x7c7ff6e862c0) at Python/ceval.c:673
#16 0x000055555649e54f in run_eval_code_obj (tstate=tstate@entry=0x555556ed4828 <_PyRuntime+359464>, co=co@entry=0x7d1ff6e20250, globals=globals@entry=0x7c7ff6e862c0,
locals=locals@entry=0x7c7ff6e862c0) at Python/pythonrun.c:1366
#17 0x000055555649d71c in run_mod (mod=<optimized out>, filename=<optimized out>, globals=<optimized out>, locals=<optimized out>, flags=<optimized out>, arena=<optimized out>,
interactive_src=<optimized out>, generate_new_source=<optimized out>) at Python/pythonrun.c:1469
#18 0x0000555556497d1d in pyrun_file (fp=fp@entry=0x7d4ff6defa80, filename=filename@entry=0x7ccff6dfaef0, start=start@entry=257, globals=globals@entry=0x7c7ff6e862c0,
locals=locals@entry=0x7c7ff6e862c0, closeit=closeit@entry=1, flags=0x7bfff5c1e910) at Python/pythonrun.c:1294
#19 0x000055555649587d in _PyRun_SimpleFileObject (fp=<optimized out>, filename=<optimized out>, closeit=<optimized out>, flags=<optimized out>) at Python/pythonrun.c:518
#20 0x0000555556494bee in _PyRun_AnyFileObject (fp=fp@entry=0x7d4ff6defa80, filename=filename@entry=0x7ccff6dfaef0, closeit=closeit@entry=1, flags=flags@entry=0x7bfff5c1e910)
at Python/pythonrun.c:81
#21 0x00005555565114ab in pymain_run_file_obj (program_name=0x7caff6e23020, filename=0x7ccff6dfaef0, skip_source_first_line=0) at Modules/main.c:410
#22 pymain_run_file (config=0x555556e9f8e8 <_PyRuntime+142568>) at Modules/main.c:429
#23 0x000055555650f574 in pymain_run_python (exitcode=0x7bfff5c1e500) at Modules/main.c:691
#24 Py_RunMain () at Modules/main.c:772
#25 0x0000555556510477 in pymain_main (args=<optimized out>) at Modules/main.c:802
#26 0x00005555565105e8 in Py_BytesMain (argc=<optimized out>, argv=0x7fffffffdb78) at Modules/main.c:826
#27 0x00007ffff7c2a575 in __libc_start_call_main (main=main@entry=0x55555591fc40 <main>, argc=argc@entry=2, argv=argv@entry=0x7fffffffdb78) at ../sysdeps/nptl/libc_start_call_main.h:58
#28 0x00007ffff7c2a628 in __libc_start_main_impl (main=0x55555591fc40 <main>, argc=2, argv=0x7fffffffdb78, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>,
stack_end=0x7fffffffdb68) at ../csu/libc-start.c:360
#29 0x00005555558364f5 in _start ()
Output from running with `PYTHON_LLTRACE=4 PYTHON_OPT_DEBUG=4`
Tracing f1.<locals>.ChaoticIterator_comp_1908.__init__ (/home/danzin/crashers/session_crash_20260118_003013_3872/01_attack.py:15) at byte offset 24 at chain depth 0
0x79493321ae50 15: JUMP_BACKWARD(5) 0 2
3 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=15, operand0=0, operand1=0)
4 ADD_TO_TRACE: _SET_IP (0, target=15, operand0=0x79493321af3e, operand1=0)
5 ADD_TO_TRACE: _CHECK_PERIODIC (0, target=15, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 12: FOR_ITER_RANGE(3) 0 2
6 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=12, operand0=0, operand1=0)
7 ADD_TO_TRACE: _SET_IP (0, target=12, operand0=0x79493321af38, operand1=0)
8 ADD_TO_TRACE: _ITER_CHECK_RANGE (3, target=12, operand0=0, operand1=0)
9 ADD_TO_TRACE: _GUARD_NOT_EXHAUSTED_RANGE (3, target=18, operand0=0, operand1=0)
10 ADD_TO_TRACE: _ITER_NEXT_RANGE (3, target=12, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 14: STORE_FAST(2) 0 3
11 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=14, operand0=0, operand1=0)
12 ADD_TO_TRACE: _SET_IP (0, target=14, operand0=0x79493321af3c, operand1=0)
13 ADD_TO_TRACE: _SWAP_FAST (2, target=14, operand0=0, operand1=0)
14 ADD_TO_TRACE: _POP_TOP (2, target=14, operand0=0, operand1=0)
15 ADD_TO_TRACE: _JUMP_TO_TOP (0, target=0, operand0=0, operand1=0)
Trace done
0 abs: _START_EXECUTOR (0, target=15, operand0=0x79493321af3e, operand1=0)
stack_level 2
1 abs: _MAKE_WARM (0, target=0, operand0=0, operand1=0)
stack_level 2
2 abs: _CHECK_VALIDITY (0, target=15, operand0=0, operand1=0)
stack_level 2
3 abs: _SET_IP (0, target=15, operand0=0x79493321af3e, operand1=0)
stack_level 2
4 abs: _CHECK_PERIODIC (0, target=15, operand0=0, operand1=0)
stack_level 2
5 abs: _CHECK_VALIDITY (0, target=12, operand0=0, operand1=0)
stack_level 2
6 abs: _SET_IP (0, target=12, operand0=0x79493321af38, operand1=0)
stack_level 2
7 abs: _ITER_CHECK_RANGE (3, target=12, operand0=0, operand1=0)
stack_level 2
8 abs: _GUARD_NOT_EXHAUSTED_RANGE (3, target=18, operand0=0, operand1=0)
stack_level 2
9 abs: _ITER_NEXT_RANGE (3, target=12, operand0=0, operand1=0)
stack_level 3
10 abs: _CHECK_VALIDITY (0, target=14, operand0=0, operand1=0)
stack_level 3
11 abs: _SET_IP (0, target=14, operand0=0x79493321af3c, operand1=0)
stack_level 3
12 abs: _SWAP_FAST (2, target=14, operand0=0, operand1=0)
stack_level 3
13 abs: _POP_TOP (2, target=14, operand0=0, operand1=0)
stack_level 2
14 abs: _JUMP_TO_TOP (0, target=0, operand0=0, operand1=0)
stack_level 2
Optimized trace (length 19):
0 OPTIMIZED: _START_EXECUTOR_r00 (0, jump_target=13, operand0=0x7999332f1420, operand1=0)
1 OPTIMIZED: _MAKE_WARM_r00 (0, target=0, operand0=0, operand1=0)
2 OPTIMIZED: _SET_IP_r00 (0, target=15, operand0=0x79493321af3e, operand1=0)
3 OPTIMIZED: _CHECK_PERIODIC_r00 (0, jump_target=0, operand0=0, operand1=0, error_target=14)
4 OPTIMIZED: _CHECK_VALIDITY_r00 (0, jump_target=15, operand0=0, operand1=0)
5 OPTIMIZED: _ITER_CHECK_RANGE_r02 (3, jump_target=16, operand0=0, operand1=0)
6 OPTIMIZED: _GUARD_NOT_EXHAUSTED_RANGE_r22 (3, jump_target=17, operand0=0, operand1=0)
7 OPTIMIZED: _ITER_NEXT_RANGE_r23 (3, jump_target=0, operand0=0, operand1=0, error_target=18)
8 OPTIMIZED: _SET_IP_r33 (0, target=14, operand0=0x79493321af3c, operand1=0)
9 OPTIMIZED: _SWAP_FAST_2_r33 (2, target=14, operand0=0, operand1=0)
10 OPTIMIZED: _SPILL_OR_RELOAD_r31 (0, target=0, operand0=0, operand1=0)
11 OPTIMIZED: _POP_TOP_r10 (2, target=14, operand0=0, operand1=0)
12 OPTIMIZED: _JUMP_TO_TOP_r00 (0, jump_target=1, operand0=0, operand1=0)
13 OPTIMIZED: _DEOPT_r00 (0, target=15, operand0=0, operand1=0)
14 OPTIMIZED: _ERROR_POP_N_r00 (0, target=0, operand0=0xf, operand1=0)
15 OPTIMIZED: _DEOPT_r00 (0, target=12, operand0=0, operand1=0)
16 OPTIMIZED: _EXIT_TRACE_r00 (0, target=12, operand0=0x7999332f14a0, operand1=0)
17 OPTIMIZED: _EXIT_TRACE_r20 (0, target=18, operand0=0x7999332f14b0, operand1=0x1)
18 OPTIMIZED: _ERROR_POP_N_r00 (0, target=0, operand0=0xc, operand1=0)
Tracing f1 (/home/danzin/crashers/session_crash_20260118_003013_3872/01_attack.py:1) at byte offset 148 at chain depth 0
0x7a7933339110 94: JUMP_BACKWARD(22) 0 6
3 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=94, operand0=0, operand1=0)
4 ADD_TO_TRACE: _SET_IP (0, target=94, operand0=0x7a793333929c, operand1=0)
5 ADD_TO_TRACE: _CHECK_PERIODIC (0, target=94, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 74: FOR_ITER_RANGE(20) 0 6
6 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=74, operand0=0, operand1=0)
7 ADD_TO_TRACE: _SET_IP (0, target=74, operand0=0x7a7933339274, operand1=0)
8 ADD_TO_TRACE: _ITER_CHECK_RANGE (20, target=74, operand0=0, operand1=0)
9 ADD_TO_TRACE: _GUARD_NOT_EXHAUSTED_RANGE (20, target=97, operand0=0, operand1=0)
10 ADD_TO_TRACE: _ITER_NEXT_RANGE (20, target=74, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 76: STORE_FAST(14) 0 7
11 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=76, operand0=0, operand1=0)
12 ADD_TO_TRACE: _SET_IP (0, target=76, operand0=0x7a7933339278, operand1=0)
13 ADD_TO_TRACE: _SWAP_FAST (14, target=76, operand0=0, operand1=0)
14 ADD_TO_TRACE: _POP_TOP (14, target=76, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 77: LOAD_FAST_BORROW(11) 0 6
15 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=77, operand0=0, operand1=0)
16 ADD_TO_TRACE: _SET_IP (0, target=77, operand0=0x7a793333927a, operand1=0)
17 ADD_TO_TRACE: _LOAD_FAST_BORROW (11, target=77, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 78: PUSH_NULL(0) 0 7
18 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=78, operand0=0, operand1=0)
19 ADD_TO_TRACE: _SET_IP (0, target=78, operand0=0x7a793333927c, operand1=0)
20 ADD_TO_TRACE: _PUSH_NULL (0, target=78, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 79: LOAD_GLOBAL_BUILTIN(1) 0 8
21 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=79, operand0=0, operand1=0)
22 ADD_TO_TRACE: _SET_IP (0, target=79, operand0=0x7a793333927e, operand1=0)
23 ADD_TO_TRACE: _GUARD_GLOBALS_VERSION (1, target=79, operand0=0x2c, operand1=0)
24 ADD_TO_TRACE: _LOAD_GLOBAL_BUILTINS (1, target=79, operand0=0x2b, operand1=0)
25 ADD_TO_TRACE: _PUSH_NULL_CONDITIONAL (1, target=79, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 84: LOAD_SMALL_INT(20) 0 10
26 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=84, operand0=0, operand1=0)
27 ADD_TO_TRACE: _SET_IP (0, target=84, operand0=0x7a7933339288, operand1=0)
28 ADD_TO_TRACE: _LOAD_SMALL_INT (20, target=84, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 85: CALL_BUILTIN_CLASS(1) 0 11
29 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=85, operand0=0, operand1=0)
30 ADD_TO_TRACE: _SET_IP (0, target=85, operand0=0x7a793333928a, operand1=0)
31 ADD_TO_TRACE: _CALL_BUILTIN_CLASS (1, target=85, operand0=0, operand1=0)
32 ADD_TO_TRACE: _TIER2_RESUME_CHECK (1, target=89, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 89: CALL_ALLOC_AND_ENTER_INIT(1) 1 9
33 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=89, operand0=0, operand1=0)
34 ADD_TO_TRACE: _SET_IP (0, target=89, operand0=0x7a7933339292, operand1=0)
35 ADD_TO_TRACE: _CHECK_PEP_523 (1, target=89, operand0=0, operand1=0)
36 ADD_TO_TRACE: _CHECK_AND_ALLOCATE_OBJECT (1, target=89, operand0=0x20049, operand1=0)
37 ADD_TO_TRACE: _CREATE_INIT_FRAME (1, target=89, operand0=0, operand1=0)
Adding 0x79493321ae51 code to op
38 ADD_TO_TRACE: _PUSH_FRAME (1, target=89, operand0=0x79493321ae51, operand1=0)
39 ADD_TO_TRACE: _GUARD_IP__PUSH_FRAME (0, target=0, operand0=0x79493321af20, operand1=0)
Trace continuing
0x79493321ae50 0: RESUME_CHECK(0) 0 0
40 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=0, operand0=0, operand1=0)
41 ADD_TO_TRACE: _SET_IP (0, target=0, operand0=0x79493321af20, operand1=0)
42 ADD_TO_TRACE: _TIER2_RESUME_CHECK (0, target=0, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 1: LOAD_GLOBAL_BUILTIN(1) 0 0
43 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=1, operand0=0, operand1=0)
44 ADD_TO_TRACE: _SET_IP (0, target=1, operand0=0x79493321af22, operand1=0)
45 ADD_TO_TRACE: _GUARD_GLOBALS_VERSION (1, target=1, operand0=0x2c, operand1=0)
46 ADD_TO_TRACE: _LOAD_GLOBAL_BUILTINS (1, target=1, operand0=0x2b, operand1=0)
47 ADD_TO_TRACE: _PUSH_NULL_CONDITIONAL (1, target=1, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 6: LOAD_SMALL_INT(68) 0 2
48 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=6, operand0=0, operand1=0)
49 ADD_TO_TRACE: _SET_IP (0, target=6, operand0=0x79493321af2c, operand1=0)
50 ADD_TO_TRACE: _LOAD_SMALL_INT (68, target=6, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 7: CALL_BUILTIN_CLASS(1) 0 3
51 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=7, operand0=0, operand1=0)
52 ADD_TO_TRACE: _SET_IP (0, target=7, operand0=0x79493321af2e, operand1=0)
53 ADD_TO_TRACE: _CALL_BUILTIN_CLASS (1, target=7, operand0=0, operand1=0)
54 ADD_TO_TRACE: _TIER2_RESUME_CHECK (1, target=11, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 11: GET_ITER(0) 0 1
55 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=11, operand0=0, operand1=0)
56 ADD_TO_TRACE: _SET_IP (0, target=11, operand0=0x79493321af36, operand1=0)
57 ADD_TO_TRACE: _GET_ITER (0, target=11, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 12: FOR_ITER_RANGE(3) 0 2
58 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=12, operand0=0, operand1=0)
59 ADD_TO_TRACE: _SET_IP (0, target=12, operand0=0x79493321af38, operand1=0)
60 ADD_TO_TRACE: _ITER_CHECK_RANGE (3, target=12, operand0=0, operand1=0)
61 ADD_TO_TRACE: _GUARD_NOT_EXHAUSTED_RANGE (3, target=18, operand0=0, operand1=0)
62 ADD_TO_TRACE: _ITER_NEXT_RANGE (3, target=12, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 14: STORE_FAST(2) 0 3
63 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=14, operand0=0, operand1=0)
64 ADD_TO_TRACE: _SET_IP (0, target=14, operand0=0x79493321af3c, operand1=0)
65 ADD_TO_TRACE: _SWAP_FAST (2, target=14, operand0=0, operand1=0)
66 ADD_TO_TRACE: _POP_TOP (2, target=14, operand0=0, operand1=0)
Trace continuing
67 ADD_TO_TRACE: _EXIT_TRACE (0, target=15, operand0=0, operand1=0)
Trace done
Tracing f1.<locals>.ChaoticIterator_comp_1908.__init__ (/home/danzin/crashers/session_crash_20260118_003013_3872/01_attack.py:15) at byte offset 36 at chain depth 0
0x79493321ae50 18: POP_ITER(0) 0 2
3 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=18, operand0=0, operand1=0)
4 ADD_TO_TRACE: _SET_IP (0, target=18, operand0=0x79493321af44, operand1=0)
5 ADD_TO_TRACE: _POP_ITER (0, target=18, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 19: LOAD_CONST(1) 0 0
6 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=19, operand0=0, operand1=0)
7 ADD_TO_TRACE: _SET_IP (0, target=19, operand0=0x79493321af46, operand1=0)
8 ADD_TO_TRACE: _LOAD_CONST (1, target=19, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 20: RETURN_VALUE(0) 1 1
9 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=20, operand0=0, operand1=0)
10 ADD_TO_TRACE: _SET_IP (0, target=20, operand0=0x79493321af48, operand1=0)
Adding 0x6390dff283c1 code to op
11 ADD_TO_TRACE: _RETURN_VALUE (0, target=20, operand0=0x6390dff283c1, operand1=0)
12 ADD_TO_TRACE: _GUARD_IP_RETURN_VALUE (0, target=0, operand0=0x6390dff28490, operand1=0)
Trace continuing
0x6390dff283c0 0: EXIT_INIT_CHECK(0) 0 2
13 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=0, operand0=0, operand1=0)
14 ADD_TO_TRACE: _SET_IP (0, target=0, operand0=0x6390dff28490, operand1=0)
15 ADD_TO_TRACE: _EXIT_INIT_CHECK (0, target=0, operand0=0, operand1=0)
Trace continuing
0x6390dff283c0 1: RETURN_VALUE(0) 1 1
16 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=1, operand0=0, operand1=0)
17 ADD_TO_TRACE: _SET_IP (0, target=1, operand0=0x6390dff28492, operand1=0)
Adding 0x79293321d560 func to op
18 ADD_TO_TRACE: _RETURN_VALUE (0, target=1, operand0=0x79293321d560, operand1=0)
19 ADD_TO_TRACE: _GUARD_IP_RETURN_VALUE (0, target=0, operand0=0x7a793333929a, operand1=0)
Trace continuing
0x7a7933339110 93: STORE_FAST(15) 0 7
20 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=93, operand0=0, operand1=0)
21 ADD_TO_TRACE: _SET_IP (0, target=93, operand0=0x7a793333929a, operand1=0)
22 ADD_TO_TRACE: _SWAP_FAST (15, target=93, operand0=0, operand1=0)
23 ADD_TO_TRACE: _POP_TOP (15, target=93, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 94: JUMP_BACKWARD(22) 0 6
24 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=94, operand0=0, operand1=0x46)
25 ADD_TO_TRACE: _SET_IP (0, target=94, operand0=0x7a793333929c, operand1=0)
26 ADD_TO_TRACE: _CHECK_PERIODIC (0, target=94, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 74: FOR_ITER_RANGE(20) 0 6
27 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=74, operand0=0, operand1=0)
28 ADD_TO_TRACE: _SET_IP (0, target=74, operand0=0x7a7933339274, operand1=0)
29 ADD_TO_TRACE: _ITER_CHECK_RANGE (20, target=74, operand0=0, operand1=0)
30 ADD_TO_TRACE: _GUARD_NOT_EXHAUSTED_RANGE (20, target=97, operand0=0, operand1=0)
31 ADD_TO_TRACE: _ITER_NEXT_RANGE (20, target=74, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 76: STORE_FAST(14) 0 7
32 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=76, operand0=0, operand1=0)
33 ADD_TO_TRACE: _SET_IP (0, target=76, operand0=0x7a7933339278, operand1=0)
34 ADD_TO_TRACE: _SWAP_FAST (14, target=76, operand0=0, operand1=0)
35 ADD_TO_TRACE: _POP_TOP (14, target=76, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 77: LOAD_FAST_BORROW(11) 0 6
36 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=77, operand0=0, operand1=0)
37 ADD_TO_TRACE: _SET_IP (0, target=77, operand0=0x7a793333927a, operand1=0)
38 ADD_TO_TRACE: _LOAD_FAST_BORROW (11, target=77, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 78: PUSH_NULL(0) 0 7
39 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=78, operand0=0, operand1=0)
40 ADD_TO_TRACE: _SET_IP (0, target=78, operand0=0x7a793333927c, operand1=0)
41 ADD_TO_TRACE: _PUSH_NULL (0, target=78, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 79: LOAD_GLOBAL_BUILTIN(1) 0 8
42 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=79, operand0=0, operand1=0)
43 ADD_TO_TRACE: _SET_IP (0, target=79, operand0=0x7a793333927e, operand1=0)
44 ADD_TO_TRACE: _GUARD_GLOBALS_VERSION (1, target=79, operand0=0x2c, operand1=0)
45 ADD_TO_TRACE: _LOAD_GLOBAL_BUILTINS (1, target=79, operand0=0x2b, operand1=0)
46 ADD_TO_TRACE: _PUSH_NULL_CONDITIONAL (1, target=79, operand0=0, operand1=0x46)
Trace continuing
0x7a7933339110 84: LOAD_SMALL_INT(20) 0 10
47 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=84, operand0=0, operand1=0)
48 ADD_TO_TRACE: _SET_IP (0, target=84, operand0=0x7a7933339288, operand1=0)
49 ADD_TO_TRACE: _LOAD_SMALL_INT (20, target=84, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 85: CALL_BUILTIN_CLASS(1) 0 11
50 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=85, operand0=0, operand1=0)
51 ADD_TO_TRACE: _SET_IP (0, target=85, operand0=0x7a793333928a, operand1=0)
52 ADD_TO_TRACE: _CALL_BUILTIN_CLASS (1, target=85, operand0=0, operand1=0)
53 ADD_TO_TRACE: _TIER2_RESUME_CHECK (1, target=89, operand0=0, operand1=0)
Trace continuing
0x7a7933339110 89: CALL_ALLOC_AND_ENTER_INIT(1) 1 9
54 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=89, operand0=0, operand1=0)
55 ADD_TO_TRACE: _SET_IP (0, target=89, operand0=0x7a7933339292, operand1=0)
56 ADD_TO_TRACE: _CHECK_PEP_523 (1, target=89, operand0=0, operand1=0)
57 ADD_TO_TRACE: _CHECK_AND_ALLOCATE_OBJECT (1, target=89, operand0=0x20049, operand1=0)
58 ADD_TO_TRACE: _CREATE_INIT_FRAME (1, target=89, operand0=0, operand1=0)
Adding 0x79493321ae51 code to op
59 ADD_TO_TRACE: _PUSH_FRAME (1, target=89, operand0=0x79493321ae51, operand1=0)
60 ADD_TO_TRACE: _GUARD_IP__PUSH_FRAME (0, target=0, operand0=0x79493321af20, operand1=0)
Trace continuing
0x79493321ae50 0: RESUME_CHECK(0) 0 0
61 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=0, operand0=0, operand1=0)
62 ADD_TO_TRACE: _SET_IP (0, target=0, operand0=0x79493321af20, operand1=0)
63 ADD_TO_TRACE: _TIER2_RESUME_CHECK (0, target=0, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 1: LOAD_GLOBAL_BUILTIN(1) 0 0
64 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=1, operand0=0, operand1=0)
65 ADD_TO_TRACE: _SET_IP (0, target=1, operand0=0x79493321af22, operand1=0)
66 ADD_TO_TRACE: _GUARD_GLOBALS_VERSION (1, target=1, operand0=0x2c, operand1=0)
67 ADD_TO_TRACE: _LOAD_GLOBAL_BUILTINS (1, target=1, operand0=0x2b, operand1=0)
68 ADD_TO_TRACE: _PUSH_NULL_CONDITIONAL (1, target=1, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 6: LOAD_SMALL_INT(68) 0 2
69 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=6, operand0=0, operand1=0)
70 ADD_TO_TRACE: _SET_IP (0, target=6, operand0=0x79493321af2c, operand1=0)
71 ADD_TO_TRACE: _LOAD_SMALL_INT (68, target=6, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 7: CALL_BUILTIN_CLASS(1) 0 3
72 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=7, operand0=0, operand1=0)
73 ADD_TO_TRACE: _SET_IP (0, target=7, operand0=0x79493321af2e, operand1=0)
74 ADD_TO_TRACE: _CALL_BUILTIN_CLASS (1, target=7, operand0=0, operand1=0)
75 ADD_TO_TRACE: _TIER2_RESUME_CHECK (1, target=11, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 11: GET_ITER(0) 0 1
76 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=11, operand0=0, operand1=0)
77 ADD_TO_TRACE: _SET_IP (0, target=11, operand0=0x79493321af36, operand1=0)
78 ADD_TO_TRACE: _GET_ITER (0, target=11, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 12: FOR_ITER_RANGE(3) 0 2
79 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=12, operand0=0, operand1=0)
80 ADD_TO_TRACE: _SET_IP (0, target=12, operand0=0x79493321af38, operand1=0)
81 ADD_TO_TRACE: _ITER_CHECK_RANGE (3, target=12, operand0=0, operand1=0)
82 ADD_TO_TRACE: _GUARD_NOT_EXHAUSTED_RANGE (3, target=18, operand0=0, operand1=0)
83 ADD_TO_TRACE: _ITER_NEXT_RANGE (3, target=12, operand0=0, operand1=0)
Trace continuing
0x79493321ae50 14: STORE_FAST(2) 0 3
84 ADD_TO_TRACE: _CHECK_VALIDITY (0, target=14, operand0=0, operand1=0)
85 ADD_TO_TRACE: _SET_IP (0, target=14, operand0=0x79493321af3c, operand1=0)
86 ADD_TO_TRACE: _SWAP_FAST (2, target=14, operand0=0, operand1=0)
87 ADD_TO_TRACE: _POP_TOP (2, target=14, operand0=0, operand1=0)
Trace continuing
88 ADD_TO_TRACE: _EXIT_TRACE (0, target=15, operand0=0, operand1=0)
Trace done
0 abs: _START_EXECUTOR (0, target=18, operand0=0x79493321af44, operand1=0)
stack_level 2
1 abs: _MAKE_WARM (0, target=0, operand0=0, operand1=0)
stack_level 2
2 abs: _CHECK_VALIDITY (0, target=18, operand0=0, operand1=0)
stack_level 2
3 abs: _SET_IP (0, target=18, operand0=0x79493321af44, operand1=0)
stack_level 2
4 abs: _POP_ITER (0, target=18, operand0=0, operand1=0)
stack_level 0
5 abs: _CHECK_VALIDITY (0, target=19, operand0=0, operand1=0)
stack_level 0
6 abs: _SET_IP (0, target=19, operand0=0x79493321af46, operand1=0)
stack_level 0
7 abs: _LOAD_CONST (1, target=19, operand0=0, operand1=0)
stack_level 1
8 abs: _CHECK_VALIDITY (0, target=20, operand0=0, operand1=0)
stack_level 1
9 abs: _SET_IP (0, target=20, operand0=0x79493321af48, operand1=0)
stack_level 1
10 abs: _RETURN_VALUE (0, target=20, operand0=0x6390dff283c1, operand1=0x2)
code=0x6390dff283c0 11 abs: _GUARD_IP_RETURN_VALUE (0, target=0, operand0=0x6390dff28490, operand1=0)
12 abs: _CHECK_VALIDITY (0, target=0, operand0=0, operand1=0)
13 abs: _SET_IP (0, target=0, operand0=0x6390dff28490, operand1=0)
14 abs: _EXIT_INIT_CHECK (0, target=0, operand0=0, operand1=0)
15 abs: _CHECK_VALIDITY (0, target=1, operand0=0, operand1=0)
16 abs: _SET_IP (0, target=1, operand0=0x6390dff28492, operand1=0)
17 abs: _RETURN_VALUE (0, target=1, operand0=0x79293321d560, operand1=0x7)
func=0x79293321d560 code=0x7a7933339110 stack_level -468
python: Python/optimizer_analysis.c:474: int optimize_uops(_PyThreadStateImpl *, _PyUOpInstruction *, int, int, _PyBloomFilter *): Assertion `STACK_LEVEL() >= 0' failed.
stdbuf: process killed by signal 6
Found using lafleur.
CPython versions tested on:
CPython main branch
Operating systems tested on:
Linux
Output from running 'python -VV' on the command line:
Python 3.15.0a5+ (heads/main:63cc1257db4, Jan 18 2026, 15:45:27) [Clang 21.1.2 (2ubuntu6)]